
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa
File: 3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa (raw, json)
Hash identifier: /4ktqb7bW1Lpjo6AnZ9CLtRrMxFPC9DUtAYAoVIAr50=
Subject key identifier: C2:D3:B8:75:CF:90:0B:FA:C7:6D:16:E2:5F:BE:64:7A:B8:44:5C:21
Certificate issuer: /CN=627df6c2-d60a-4467-85f2-dd6d009eafe8
Certificate serial: 010D0C9F4328584EC20C67FA1A9BFB1C396B6280
Authority key identifier: 3B:AE:19:3B:C4:79:F6:F2:59:AD:1B:B8:56:E6:5F:E1:1E:DF:64:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa
Signing time: Fri 07 Aug 2026 13:00:11 +0000
ROA not before: Fri 07 Aug 2026 13:00:11 +0000
ROA not after: Thu 05 Nov 2026 14:00:11 +0000
asID: 27218
IP address blocks: 192.30.120.0/23 maxlen: 23
2620:71:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/627df6c2-d60a-4467-85f2-dd6d009eafe8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/627df6c2-d60a-4467-85f2-dd6d009eafe8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c2:0c:67:fa:1a:9b:fb:1c:39:6b:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627df6c2-d60a-4467-85f2-dd6d009eafe8
Validity
Not Before: Aug 7 13:00:11 2026 GMT
Not After : Nov 5 14:00:11 2026 GMT
Subject: CN=2273caa3-2baf-49f3-917d-7716c928a6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:ac:3c:28:81:25:e9:0b:07:64:b0:b8:5d:
30:70:82:7a:e4:8b:05:02:17:52:87:2e:1a:ce:33:
12:e7:09:85:6c:76:18:4c:ab:e3:1a:9b:75:38:86:
e2:ff:35:ed:07:8c:1a:0e:5f:40:65:c3:78:dd:4c:
a1:2b:ff:6f:4b:88:fa:5a:67:61:98:7e:49:ba:02:
fc:8c:a4:80:ab:ba:cf:db:8d:50:93:4b:90:cc:4e:
17:45:bf:b7:6d:1b:b4:61:3a:f3:d4:0f:31:b2:38:
f7:40:44:ba:e1:e3:46:4a:93:25:28:f0:aa:37:86:
f3:3e:f6:1c:7c:c5:af:27:4e:c5:ad:c1:14:9b:e4:
7d:2f:77:24:36:bd:fd:1d:20:fd:d8:15:2e:a0:c6:
e7:c3:18:a3:2f:7e:36:6a:67:5c:c2:84:71:9d:d3:
32:12:7b:19:66:a1:09:5f:90:02:eb:15:e5:51:ed:
56:c4:f6:3a:61:f3:1f:70:8a:29:1d:a4:a4:4f:4f:
e5:e8:3a:ca:54:6e:1c:82:92:7d:4d:36:bf:ff:7c:
10:a5:25:f0:35:76:96:1f:a4:3e:af:5d:45:a9:43:
8d:68:b9:09:3b:90:2f:41:4d:d1:b4:39:d3:b2:2c:
72:65:f8:12:b5:88:d3:77:b7:e4:da:03:a1:21:ff:
cf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D3:B8:75:CF:90:0B:FA:C7:6D:16:E2:5F:BE:64:7A:B8:44:5C:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/627df6c2-d60a-4467-85f2-dd6d009eafe8.crl
X509v3 Authority Key Identifier:
keyid:3B:AE:19:3B:C4:79:F6:F2:59:AD:1B:B8:56:E6:5F:E1:1E:DF:64:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8.cer
sbgp-ipAddrBlock: critical
IPv4:
192.30.120.0/23
IPv6:
2620:71:4000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:88:77:fe:ab:9c:39:51:b5:a4:63:b5:aa:c1:92:39:26:57:
05:db:82:65:02:65:7d:2a:43:11:2e:e3:f2:02:da:49:74:d2:
68:35:40:2b:de:cf:27:06:25:12:fa:3f:6c:0f:db:6b:6e:7e:
32:ba:cb:8b:5a:2e:cb:0d:d1:5e:d1:47:4b:a9:0a:41:03:95:
05:f4:af:7e:eb:7f:dd:8f:fa:9e:34:97:14:ba:3b:67:b0:ae:
9f:6e:a3:05:c3:66:0e:a6:25:34:4a:c9:7b:5c:64:ae:44:2c:
77:f4:3d:25:b5:cc:de:f5:4e:64:fe:b3:43:8f:3a:db:37:18:
32:20:68:58:7b:c4:97:78:06:5f:e2:64:33:73:17:8b:97:48:
d9:dd:28:f6:d5:42:2c:39:19:5f:b5:33:3e:43:ac:ae:ab:58:
6e:5e:2f:68:2e:99:b9:cd:dd:b3:a2:83:dc:59:f3:0e:dd:08:
28:46:e7:00:70:c2:78:4c:7c:f0:40:77:7a:b3:75:c6:2e:c0:
1e:fe:d2:29:5f:b8:aa:9a:cc:1d:25:79:e4:b7:8d:2d:ac:c5:
f9:b3:04:7a:ae:8b:8c:7c:71:10:4c:43:94:55:2a:ff:c4:f5:
d9:cc:09:0a:ac:2f:3f:7c:83:e7:92:2a:7c:91:24:12:b6:45:
bc:ca:af:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 21:25:35 2026 by rpki-client